Kaspar Brand wrote: > Nelson Bolyard wrote: >> and, in response to the parameter of type cert_pi_policyOID, it should >> call PKIX_ProcessingParams_SetExplicitPolicyRequired to set the >> http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/security/nss/lib/certhigh/certvfypkix.c&rev=1.41&mark=1584,1587-1588#1584 > > Thanks, this is obviously the piece I was missing when I first looked at > the code. That looks correct (and my observation about vfychain most > likely resulted from a pilot error, as explained off-list).
In case someone is interested in the full details: see https://bugzilla.mozilla.org/show_bug.cgi?id=489096. Kaspar -- dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto
